X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=src%2Fvnet%2Ftls%2Ftls.h;h=31572e8c46339e5681fe9f6674309c6e66a7065c;hb=0d74dd1f823b170d623316cf07eee70851494470;hp=5ddce9ae56cdfdbc4df6ecd2d3281ed75be8ede5;hpb=54a51fd5869c3451096e6512a927ff864855a24f;p=vpp.git diff --git a/src/vnet/tls/tls.h b/src/vnet/tls/tls.h index 5ddce9ae56c..31572e8c463 100644 --- a/src/vnet/tls/tls.h +++ b/src/vnet/tls/tls.h @@ -14,6 +14,7 @@ */ #include +#include #include #include @@ -36,22 +37,23 @@ #endif /* *INDENT-OFF* */ -typedef CLIB_PACKED (struct tls_cxt_id_ +typedef struct tls_cxt_id_ { - u32 parent_app_index; union { session_handle_t app_session_handle; u32 parent_app_api_ctx; }; session_handle_t tls_session_handle; + u32 parent_app_wrk_index; u32 ssl_ctx; u32 listener_ctx_index; u8 tcp_is_ip4; u8 tls_engine_id; -}) tls_ctx_id_t; +} tls_ctx_id_t; /* *INDENT-ON* */ -STATIC_ASSERT (sizeof (tls_ctx_id_t) <= 42, "ctx id must be less than 42"); +STATIC_ASSERT (sizeof (tls_ctx_id_t) <= TRANSPORT_CONN_ID_LEN, + "ctx id must be less than TRANSPORT_CONN_ID_LEN"); typedef struct tls_ctx_ { @@ -60,7 +62,7 @@ typedef struct tls_ctx_ transport_connection_t connection; tls_ctx_id_t c_tls_ctx_id; }; -#define parent_app_index c_tls_ctx_id.parent_app_index +#define parent_app_wrk_index c_tls_ctx_id.parent_app_wrk_index #define app_session_handle c_tls_ctx_id.app_session_handle #define tls_session_handle c_tls_ctx_id.tls_session_handle #define listener_ctx_index c_tls_ctx_id.listener_ctx_index @@ -74,7 +76,10 @@ typedef struct tls_ctx_ u8 is_passive_close; u8 resume; + u8 app_closed; + u8 no_app_session; u8 *srv_hostname; + u32 ckpair_index; } tls_ctx_t; typedef struct tls_main_ @@ -91,6 +96,8 @@ typedef struct tls_main_ */ u8 use_test_cert_in_ca; char *ca_cert_path; + u64 first_seg_size; + u32 fifo_size; } tls_main_t; typedef struct tls_engine_vft_ @@ -106,11 +113,13 @@ typedef struct tls_engine_vft_ u8 (*ctx_handshake_is_over) (tls_ctx_t * ctx); int (*ctx_start_listen) (tls_ctx_t * ctx); int (*ctx_stop_listen) (tls_ctx_t * ctx); + int (*ctx_transport_close) (tls_ctx_t * ctx); + int (*ctx_app_close) (tls_ctx_t * ctx); } tls_engine_vft_t; tls_main_t *vnet_tls_get_main (void); void tls_register_engine (const tls_engine_vft_t * vft, - tls_engine_type_t type); + crypto_engine_type_t type); int tls_add_vpp_q_rx_evt (session_t * s); int tls_add_vpp_q_tx_evt (session_t * s); int tls_add_vpp_q_builtin_tx_evt (session_t * s); @@ -118,6 +127,7 @@ int tls_add_vpp_q_builtin_rx_evt (session_t * s); int tls_notify_app_accept (tls_ctx_t * ctx); int tls_notify_app_connected (tls_ctx_t * ctx, u8 is_failed); void tls_notify_app_enqueue (tls_ctx_t * ctx, session_t * app_session); +void tls_disconnect_transport (tls_ctx_t * ctx); #endif /* SRC_VNET_TLS_TLS_H_ */ /*